You are here: Analyst's functions > Evidence analysis > Evidence export data

Evidence export data

Data required to export evidence is described below.

IMPORTANT: only evidence that meets the specified criteria will be exported!

Data Description

From

To

Time range for the evidence to be exported.

Acquired It considers the date as the evidence acquisition date on the target device.
Received It considers the date as the evidence receipt date.

Relevance

Level of relevance for the evidence to be exported.

Type

Types of evidence to be exported.

NOTE: when no type of evidence is selected, RCS automatically exports all types.

Report

If selected, only evidence with the Report field selected will be exported. Notes can be included or excluded from the export.

Report Name

Exported file name. By default, RCS names the file as follows:

Evidence exported from page File name
Target

<target name - agent name> - Evidence Export.tgz

Agent

<agent name> - Evidence Export.tgz

RCS8.2 | User's and Installation Guide | © COPYRIGHT 2012